DATA PROCESSING DEVICE, METHOD, PROGRAM, INTEGRATED CIRCUIT, AND PROGRAM GENERATING DEVICE

• US 20090307783A1
• Filed: 04/24/2007
• Published: 12/10/2009
• Est. Priority Date: 04/24/2006
• Status: Abandoned Application

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Matsushima, Hideki, Maeda, Manabu, Ito, Yoshikatsu
• Application Number:
  US12/298,198
• Publication Number:
  US 20090307783A1
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 11/3648 using additional hardware
• CPC Class Codes: G06F 11/3664 Environments for testing or debugging software
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

A data processing apparatus controls execution of debugging of a program performed by a debugger. The program includes a verification value used for judgment on whether to permit the debugging, and an access control list that shows whether to permit an access to each of parts constituting the program. The data processing apparatus acquires a debugger ID of the debugger from the debugger, and the verification value and the access control list included in the program. The data processing apparatus judges whether to permit the debugging, according to the result of comparison between the debugger ID and the verification value. The data processing apparatus permits an access to a part of the program to be debugged when the access control list shows that the access is permitted. The data processing apparatus does not permit the access to the part when the access control list shows that the access is not permitted.

Claims

1. A data processing apparatus comprising:

a debugging unit operable to perform execution of debugging, the data processing apparatus controlling the execution of debugging performed by the debugging unit;

a first acquiring unit operable to acquire an identifier of the debugging unit from the debugging unit;

a second acquiring unit operable to acquire a verification value included in a prescribed part of a target program that is a target of debugging and protected against an unauthorized access;

a judging unit operable to make a comparison between the identifier and the verification value, and make a judgment on whether the debugging of the target program is permitted according to a result of the comparison; and

a control unit operable to prohibit the execution of the debugging of the target program when the judging unit judges that the debugging of the target program is not permitted.

2. The data processing apparatus of claim 1, wherein

the prescribed part of the target program includes an access control list that shows whether to permit an access to each of parts constituting the target program,

the second acquiring unit includes an access control list acquiring subunit operable to acquire the access control list from the prescribed part of the target program,

the data processing apparatus further comprises an access judging unit operable to make an judgment on whether the access to each of parts constituting the target program is permitted according to the access control list acquired by the access control list acquiring subunit, and

the control unit prohibits execution of debugging of a given part of parts constituting the target program when the judging unit judges that the debugging of the target program is permitted and when the access judging unit judges that the access to the given part of parts constituting the target program is not permitted, and permits the debugging unit to execute the debugging of the given part of parts constituting the target program when the judging unit judges that the debugging of the target program is permitted and when the access judging unit judges that the access to the given part of parts constituting the target program is permitted.

3. The data processing apparatus of claim 2, wherein

the access control list includes a plurality of address ranges, the plurality of the address ranges respectively corresponding to parts constituting the target program,

the access control list includes a plurality of pieces of access information, each of the plurality of the pieces of the access information indicating whether to permit the access to each of parts constituting the target program, the plurality of the address ranges respectively corresponding to the plurality of the pieces of the access information, and

the access judging unit makes the judgment by referring to the access information that corresponds to the given part of parts constituting the target program.

4. The data processing apparatus of claim 2, wherein

the access control list includes a plurality of symbols, one of the plurality of the symbols being included in each of parts constituting the target program,

the access control list includes a plurality of pieces of access information, each of the plurality of the pieces of the access information indicating whether to permit the access to each of parts constituting the target program, the plurality of the symbols respectively corresponding to the plurality of the pieces of the access information, and

the access judging unit makes the judgment by referring to the access information that corresponds to a symbol included in the given part of parts constituting the target program.

5. The data processing apparatus of claim 2, wherein

the prescribed part of the target program includes a plurality of the verification values,

the prescribed part of the target program includes a plurality of the access control lists, each of the plurality of the verification values corresponding to at least one of the plurality of the access control lists,

the judging unit makes the judgment by comparing each of the plurality of the verification values with the identifier, and

the access judging unit makes the judgment based on one of the plurality of the access control lists corresponding to one of the plurality of the verification values, when the judging unit judges that the one of the plurality of the verification values matches the identifier.

6. The data processing apparatus of claim 2, further comprising a display unit, wherein

the control unit includes a display control subunit operable to control the display unit to show that the execution of the debugging of the given part of the target program is prohibited when the control unit prohibits execution of debugging of the given part of parts constituting the target program, and to control the display unit to show a result of the debugging of the given part of the target program when the control unit permits execution of debugging of the given part of parts constituting the target program.

7. The data processing apparatus of claim 1, wherein

the judging unit compares the identifier and the verification value, and judges that the debugging of the target program is permitted when the identifier matches the verification value.

8. The data processing apparatus of claim 1, wherein

the judging unit includes a comparison value holding subunit operable to store a comparison value, the comparison value holding subunit being protected against the unauthorized access, and

the judging unit performs a prescribed calculation using the verification value and the identifier, and judges that the debugging of the target program is permitted when a result of the prescribed calculation matches the comparison value stored in the comparison value holding subunit.

9. The data processing apparatus of claim 1, further comprising a secure domain, the secure domain comprising a mechanism for preventing an unauthorized access from outside, wherein

the data processing apparatus switches between a normal mode and secure mode, and uses the secure domain to perform an operation in the secure mode,

the data processing apparatus further comprises a switching unit operable to switch between the normal mode and the secure mode,

a normal program that runs in the normal mode is capable of accessing a secure program that runs in the secure mode, by sending a request for prescribed processing to the secure program via the switching unit,

the target program is stored within the secure domain,

the second acquiring unit acquires the verification value from the prescribed part of the target program within the secure domain, and

the judging unit makes the judgment within the secure domain.

10. The data processing apparatus of claim 9, wherein

the debugging unit resides outside of the secure domain and operates in the normal mode,

the data processing apparatus further comprises a secure debugger that is included in the secure domain and performs debugging in the secure mode,

the debugging unit outputs a request for debugging the target program to the control unit, and

according to the request, the control unit controls the judging unit to make the judgment, and when the judging unit judges that the debugging of the target program is not permitted, prohibits the secure debugger from debugging the target program relating to the request.

11. The data processing apparatus of claim 10, wherein

the prescribed part of the target program includes an access control list that shows whether to permit an access to each of parts constituting the target program,

the second acquiring unit includes an access control list acquiring subunit operable to acquire the access control list from the prescribed part of the target program,

the data processing apparatus further comprises an access judging unit operable to make an judgment on whether the access to each of parts constituting the target program is permitted according to the access control list acquired by the access control list acquiring subunit,

the access judging unit makes the judgment within the secure domain, and

the control unit prohibits the secure debugger from execution of the debugging of a given part of parts constituting the target program relating to the request when the judging unit judges that the debugging of the target program is permitted and when the access judging unit judges that the access to the given part of parts constituting the target program is not permitted, and permits the secure debugger to execute the debugging of the given part of parts constituting the target program when the judging unit judges that the debugging of the target program is permitted and when the access judging unit judges that the access to the given part of parts constituting the target program is permitted.

12. The data processing apparatus of claim 10, wherein

the debugging unit has a function to debug the normal program and does not have a function to debug the target program that cooperates with the normal program, and

when the debugging unit performs the debugging of the target program, the debugging unit outputs to the control unit the request for debugging the target program, and the control unit controls the secure debugger to debug the target program in response to the request, the secure debugger having a function to debug the target program that cooperates with the normal program.

13. The data processing apparatus of claim 12, wherein

the debugging unit outputs via the control unit to the secure debugger a process identifier that identifies the normal program which the debugging unit can debug, and

the secure debugger changes an instruction located at an entry point of the target program to a break instruction, the target program cooperating with the normal program indicated by the process identifier output by the debugging unit.

14. The data processing apparatus of claim 12, wherein

when a debug exception is detected during execution of the target program in the secure mode, the control unit further transmits a notification of the debug exception to the debugging unit,

upon receiving the notification, the debugging unit outputs to the control unit a request for generating debug information showing a debug result, and

upon receiving the request for generating the debug information, the control unit controls the secure debugger to debug the target program to generate the debug information when the judging unit judges that the debugging of the target program is permitted, and outputs the generated debug information to the debugging unit.

15. The data processing apparatus of claim 12, further comprising:

a first result display unit operable to display a result of debugging of the normal program in a first display area; and

a second result display unit operable to display a result of debugging of the target program that cooperates with the normal program in a second display area, which is different from the first display area, wherein

when the target program and the normal program which cooperate with each other are running, the first result display unit displays the result of the debugging of the normal program in the first display area, and the second result display unit displays the result of the debugging of the target program in the second display area.

16. The data processing apparatus of claim 12, wherein

a normal OS operates in the normal mode,

a protected OS operates in the secure mode,

the normal program operates in the normal mode, as a process generated by the normal OS,

the debugging unit operates in the normal mode, as a debugger that operates on the normal OS,

the target program operates in the secure mode, as a process generated by the protected OS, and

the secure debugger is implemented as a function of the protected OS.

17. The data processing apparatus of claim 10, wherein

according to the request for debugging the target program output by the debugging unit, the control unit controls the judging unit to make the judgment, and when the judging unit judges that the debugging of the target program is not permitted, outputs a debug prohibition notification, showing that the debugging of the target program is prohibited, to the debugging unit.

18. A program generation apparatus, comprising:

a program acquiring unit operable to acquire a program that includes protection information that is to be kept secret;

a verification value generation unit operable to generate a verification value used for judgment on whether to permit a debugging unit to debug the acquired program based on an identifier of the debugging unit; and

a protected-program generation unit operable to generate a protected program by adding the verification value to the acquired program.

19. The program generation apparatus of claim 18, further comprising

an access control list acquiring unit operable to acquire an access control list that shows whether to permit an access thereto to each of parts constituting the program, wherein

the protected-program generation unit includes an access control list adding subunit operable to add the acquired access control list to the program.

20. A data processing method for controlling execution of debugging performed by a debugging unit, the data processing method comprising:

acquiring from the debugging unit an identifier of the debugging unit;

acquiring a verification value included in a prescribed part of a target program that is a target of debugging and protected against an unauthorized access;

making a comparison between the identifier and the verification value, and making a judgment on whether the debugging of the target program is permitted according to a result of the comparison; and

prohibiting the execution of the debugging of the target program when the judging unit judges that the debugging of the target program is not permitted.

21. A computer-readable control program that causes a data processing apparatus to control execution of debugging performed by a debugging unit, the control program comprising:

acquiring from the debugging unit an identifier of the debugging unit;

acquiring a verification value included in a prescribed part of a target program that is a target of debugging and protected against an unauthorized access;

making a comparison between the identifier and the verification value, and making a judgment on whether the debugging of the target program is permitted according to a result of the comparison; and

prohibiting the execution of the debugging of the target program when the judging unit judges that the debugging of the target program is not permitted.

22. An integrated circuit used in a data processing apparatus that controls execution of debugging performed by a debugging unit, the integrated circuit comprising:

a first acquiring unit operable to acquire from the debugging unit an identifier of the debugging unit;

a second acquiring unit operable to acquire a verification value included in a prescribed part of a target program that is a target of debugging and protected against an unauthorized access;

a judging unit operable to make a comparison between the identifier and the verification value, and make a judgment on whether the debugging of the target program is permitted according to a result of the comparison; and

a control unit operable to prohibit the execution of the debugging of the target program when the judging unit judges that the debugging of the target program is not permitted.

23. A program generation method comprising:

acquiring a program that includes protection information that is to be kept secret;

generating a verification value used for judgment on whether to permit a debugging unit to debug the acquired program based on an identifier of the debugging unit; and

generating a protected program by adding the verification value to the acquired program.

24. A computer-readable control program that causes a program generation apparatus to generate a program, the control program comprising:

acquiring a program that includes protection information that is to be kept secret;

generating a verification value used for judgment on whether to permit a debugging unit to debug the acquired program based on an identifier of the debugging unit; and

generating a protected program by adding the verification value to the acquired program.

25. An integrated circuit used in a program generation apparatus that generates a program, the integrated circuit comprising:

a program acquiring unit operable to acquire a program that includes protection information that is to be kept secret;

a verification value generation unit operable to generate a verification value used for judgment on whether to permit a debugging unit to debug the acquired program based on an identifier of the debugging unit; and

a protected-program generation unit operable to generate a protected program by adding the verification value to the acquired program.